Energy continues to have difficulty finding, tracking and fixing previously reported cybersecurity weaknesses, the IG said in a report.

To read the full report, The Department's Unclassified Cyber Security Program'2004, enter 310 in the GCN.com GCN.com/search box.

The report praised the department for improving its cybersecurity but pointed to continuing gaps in its virtual defenses, such as incomplete certification and accreditation of major systems; missing contingency plans for restoring systems after an emergency; and continuing problems with access control, segregation of responsibilities for financial processing and correction of known security vulnerabilities.